We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
An API user that have read access on users resource can steal accounts of other users.
Upgrade to 10.0.10.
If you have any questions or comments about this advisory, mail us at glpi-security@ow2.org.
jbms-syn Reporter
Impact
An API user that have read access on users resource can steal accounts of other users.
Patches
Upgrade to 10.0.10.
For more information
If you have any questions or comments about this advisory, mail us at glpi-security@ow2.org.